- sqs, s3, memory: public APIs (auth not required) - memory: uses static API key internally, no JWT validation needed - iam: protected by JWT validation + iam:admin capability check - revoked tokens detected via JWKS key rotation (15min cache TTL)
- sqs, s3, memory: public APIs (auth not required) - memory: uses static API key internally, no JWT validation needed - iam: protected by JWT validation + iam:admin capability check - revoked tokens detected via JWKS key rotation (15min cache TTL)